35c9f662c344fa9ac051d6f1162554842c341cb6c7ffa64af05983c668254d2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35c9f662c344fa9ac051d6f1162554842c341cb6c7ffa64af05983c668254d2d
Size

33KB
MD5

297ba907bdb9d502137dc1a2899e9fce
SHA1

182ee227850926f732e50f4bb800b2a41c6bebf8
SHA256

35c9f662c344fa9ac051d6f1162554842c341cb6c7ffa64af05983c668254d2d
SHA512

1b82685c2b18d080da88683c26ea9dd35b9a68260cb3922ba9560e2f5aaba45dba94d2ed791d407796bf91cc4a8928e8230e7a1c80b0784d5d9f996ed2e63cd7
SSDEEP

384:MApc8m4e0fvQak4JI341Cdabnk6hJPNyHd:MApQr0fvdFJI34zTk6hJPNy9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35c9f662c344fa9ac051d6f1162554842c341cb6c7ffa64af05983c668254d2d

Files

35c9f662c344fa9ac051d6f1162554842c341cb6c7ffa64af05983c668254d2d
.exe windows:4 windows x86 arch:x86

7ecd8f76627cb5379a7c0b0c02b48c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
MoveFileW
GetSystemDirectoryW

shell32

ShellExecuteW

msvcrt

_wstat
_exit
exit
wcscmp
wcscat
fclose
memset
fread
fseek
_wfopen
fwrite
wcslen
wcscpy
wcsstr
__p__commode
wcsncpy
__p__fmode
_XcptFilter
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type
_except_handler3
_controlfp
_wcslwr

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE